ci: Ignore tags in push events; add permission for writing changelog

Author: TeddyHuang-00

.github/workflows/ci.yml

@@ -4,6 +4,8 @@
 name: Test Build Binaries
 on:
   push:
+    tags-ignore:
+      - "**"
   workflow_dispatch:
 
 jobs:

.github/workflows/release.yml

@@ -76,6 +76,8 @@ jobs:
     name: Update Changelog
     runs-on: ubuntu-latest
     needs: build-release
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - name: Update CHANGELOG